Privacy Policy
1. Who we are
A-B-Seen is operated by A-site ApS, CVR 36916702, Lystoftevej 45, 2800 Kgs. Lyngby, Denmark. A-site ApS is the data controller for personal data processed in A-B-Seen. Contact: kontakt@a-b-seen.dk.
2. Data we process
- Account data: name, email address, company name and password (stored hashed).
- Website data: the domains and keywords you ask us to monitor, and publicly available information about your website and competitors (pages, sitemaps, Google rankings).
- Google user data, if you choose to connect your Google account (section 3).
- Payment data is handled by our payment provider; we do not store card numbers.
- Technical data: login and error logs needed to operate and secure the service.
3. Google user data
You can grant A-B-Seen access to your Google account through Google's own consent screen. We request read-only access only:
| Google service / scope | Data accessed | How we use it |
|---|---|---|
| Google account basic profile (openid, email, profile) | Name and email address | To sign you in and link the connection to your A-B-Seen account |
| Google Search Console, read-only (webmasters.readonly) | Your list of verified sites and search performance data: queries, pages, clicks, impressions, CTR and average position | To show your keywords and pages, track changes over time and recommend improvements to your own website |
| Google Analytics, read-only (analytics.readonly) | Your list of Analytics properties and report data: sessions, traffic sources, landing pages and events (e.g. contact form submissions) | To show your traffic and which pages generate leads, and to prioritise recommendations |
We cannot modify, delete or create anything in your Google accounts.
Limited Use. A-B-Seen's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- Google user data is used only to provide and improve the user-facing features of A-B-Seen that you see and use.
- We never sell Google user data and never use it for advertising, credit-worthiness or to build profiles of individuals.
- Google user data is not used to develop, improve or train generalised AI or machine-learning models — neither ours nor anyone else's.
- No human reads your Google user data unless you give consent (e.g. in a support request), it is necessary for security purposes, or it is required by law.
4. AI recommendations
A-B-Seen uses artificial intelligence (Anthropic's Claude models) to write recommendations and draft texts for your website. For this purpose, selected figures and texts about your website — such as keywords, pages and clicks — are sent to Anthropic, which processes them on our behalf as a data processor and may not use them to train its models. Recommendations are shown only to you.
5. Purposes and legal basis
- Providing the service you subscribe to (contract, GDPR Art. 6(1)(b)).
- Securing and improving the service and preventing abuse (legitimate interest, Art. 6(1)(f)).
- Complying with Danish bookkeeping law (legal obligation, Art. 6(1)(c)).
- Newsletters and marketing only with your consent, which you can withdraw at any time.
6. Who we share data with
- Hetzner Online GmbH (Germany) — servers and database. Data is stored in the EU.
- Anthropic (USA) — AI recommendations, see section 4. Transfers rely on the EU Standard Contractual Clauses.
- DataForSEO — public search results and search volumes. We only send keywords and domains, never Google user data.
- Cloudflare — website delivery, attack protection and email forwarding.
- Payment provider and auditor, where necessary.
We never sell personal data.
7. Retention and deletion
- Google user data is kept while your account is active and the Google connection is enabled, so you can see history over time.
- If you disconnect Google in A-B-Seen, access tokens are deleted immediately and retrieved Google data is deleted within 30 days.
- If you close your account, all your data is deleted within 30 days, except accounting records, which Danish law requires us to keep for 5 years.
You can also revoke A-B-Seen's access at any time in your Google account under Third-party connections.
8. Security
All traffic is encrypted (HTTPS). Google access tokens are stored encrypted, server access is key-based only, and backups are encrypted and stored in the EU.
9. Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection. Write to kontakt@a-b-seen.dk. You may lodge a complaint with the Danish Data Protection Agency (Datatilsynet), datatilsynet.dk.
10. Cookies
We only use cookies necessary for login and security. We do not use tracking or advertising cookies.
11. Changes
If we materially change this policy, we will notify you by email and in A-B-Seen before the change takes effect.